nerdexam
Microsoft

AZ-800 · Question #94

You need to allow a user to change the settings like email notifications within Azure AD Connect Health. Which of the following Roles would you provide to the user? (Choose the role with minimum…

The correct answer is B. Contributor. To allow a user to change settings like email notifications in Azure AD Connect Health, the Contributor role is the minimum privilege required.

Manage Windows Servers and workloads in a hybrid environment

Question

You need to allow a user to change the settings like email notifications within Azure AD Connect Health. Which of the following Roles would you provide to the user? (Choose the role with minimum privileges that suits the best and is sufficient for the given scenario)

Options

  • AOwner
  • BContributor
  • CReader
  • DWriter

How the community answered

(30 responses)
  • A
    3% (1)
  • B
    93% (28)
  • C
    3% (1)

Why each option

To allow a user to change settings like email notifications in Azure AD Connect Health, the Contributor role is the minimum privilege required.

AOwner

The Owner role has full access to all resources, including the right to delegate roles, which is excessive for merely changing settings in Azure AD Connect Health.

BContributorCorrect

The Contributor role provides full access to manage all resources but does not allow assigning roles in Azure, which is sufficient for modifying settings within Azure AD Connect Health. This role enables the user to perform actions like configuring email notifications and other service-specific settings.

CReader

The Reader role only allows viewing resources and their settings, preventing the user from making any changes, including email notification configurations.

DWriter

Writer is not a standard Azure built-in role; typically, Contributor covers write operations.

Concept tested: Azure RBAC for Azure AD Connect Health

Source: https://learn.microsoft.com/en-us/azure/active-directory/hybrid/whatis-azure-ad-connect-health-rbac

Topics

#Azure AD Connect Health#Azure RBAC#Role-Based Access Control#Hybrid Identity

Community Discussion

No community discussion yet for this question.

Full AZ-800 Practice